Privacy Policy

1. Who we are

1-Apply is an application automation platform that helps users store application information once and reuse it across job, internship, scholarship, hackathon, and fellowship applications.

For privacy questions, contact us using the contact method on our website or Chrome Web Store listing.

2. Information we collect

2.1 Account information

When you create an account, we collect:

• Email address and password (or credentials from our authentication provider)
• Profile information you enter (name, phone, location, education, links, and similar fields)
• Onboarding and consent records (e.g., terms and AI processing consent)

2.2 Application Memory (“Your kit”)

You may provide or we may extract from documents you upload:

• Resume and CV content
• Education, employment, projects, skills, certifications, and other evidence
• Answers to application questions you save or approve
• Links (e.g., LinkedIn, GitHub, portfolio)

2.3 Documents

When you upload files, we store the file, metadata (name, type, version, upload time), and extracted text.

2.4 Application and opportunity data

When you add opportunities or use our Chrome extension, we may collect:

• URLs of application forms and opportunity pages
• Form field labels, types, and options detected on third-party sites
• Deadlines, eligibility requirements, and questions parsed from postings
• Application status, attachments, and submission-related metadata you record in the Service

We do not automatically submit applications on third-party sites on your behalf without your action on the host site.

2.5 Chrome extension

• Uses your signed-in session on the 1-Apply website to authenticate API requests
• Reads form structure and field content on pages you interact with when you use extension features
• May write values into form fields only when you enable filling; it does not bypass CAPTCHA, payment, or submit controls by design

The extension requests permissions to access tabs you use with the extension, storage, cookies for your 1-Apply site, and (when you grant) host access to application websites.

2.6 Integrations (optional)

If you connect Google Calendar or Gmail, we receive OAuth tokens (stored encrypted) and process calendar or email data only as needed for features you enable. You can disconnect integrations in Settings.

2.7 Technical and usage data

We may collect IP address, browser type, device information, request logs, error logs, and security events.

3. How we use information

• Provide, operate, and improve the Service
• Extract structured facts from documents you upload (with consent where required)
• Analyze opportunities, score eligibility, recommend resume versions, and prepare fill plans
• Generate draft answers only from information you have stored, when you request AI assistance
• Send in-app notifications (e.g., missing deadlines, document processing results)
• Sync calendar reminders when you connect Google Calendar
• Maintain security, prevent abuse, and comply with law

We do not sell your personal information to third parties.

4. Artificial intelligence

When AI features are enabled and you have given required consent:

• Document text and opportunity content may be sent to third-party AI providers (e.g., Google Gemini, Groq)
• AI outputs are grounded in your stored data; we avoid inventing credentials you did not provide
• You should review AI-generated or extracted content before relying on it for applications

You may use parts of the Service without AI if no provider is configured or you choose not to consent to AI processing.

5. How we share information

• Infrastructure providers (e.g., Supabase, cloud hosting) — host and secure the Service
• AI providers (e.g., Google, Groq) — process text for extraction or drafting under their terms
• Google (if you connect Calendar/Gmail) — OAuth and sync features
• Legal requirements — when required by law or valid legal process

We do not share your data with advertisers for targeted advertising.

6. Data storage and security

• Data is stored on secure cloud infrastructure with access controls
• Files are stored in private storage scoped to your account
• Database access uses row-level security so users can access only their own data
• Integration tokens are encrypted at rest
• Secrets are kept server-side and not exposed in the browser extension

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data retention

We retain your information while your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with law. If you delete your account or documents, we delete or anonymize associated data according to our deletion flows, except where retention is required by law.

8. Your choices and rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information
• Export your data (Settings → export, where available)
• Withdraw consent for AI processing (may limit AI features)
• Disconnect third-party integrations
• Delete your account

Contact us using the contact method on our website or store listing to exercise these rights.

9. Children

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

10. International users

Your information may be processed in countries where our providers operate. By using the Service, you consent to transfer and processing in those locations, subject to applicable law.

11. Third-party websites and forms

The Service interacts with third-party application forms and websites not controlled by us. Their privacy practices apply when you use those sites.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new “Last updated” date. Continued use after changes means you accept the updated policy.

13. Contact

Website: http://3.108.122.44/

For privacy-related questions, use the contact email on our Chrome Web Store listing or reach us through the app.